Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8i7mi8m8aS4fVAckgV46bbMJjPH5yAbWKaHkCexsXPzE/0/323830343a346331633a343030303a3a2f33342d3334203d3e20323637333530.roa
File:                     323830343a346331633a343030303a3a2f33342d3334203d3e20323637333530.roa (raw, json)
Hash identifier:          v0fuLL7NNaLSg6ZNv0ivtKLxvuO1WX+waJPWeLLhc/0=
Subject key identifier:   9F:5D:49:9B:C0:B7:9F:5F:37:AF:96:6E:B1:27:4B:CE:42:A5:E0:5E
Certificate issuer:       /CN=D1B4AF0A275C0D0742C743A8BE8BCDF56B03DA7F
Certificate serial:       022ADC2B374F873CDE309AE1A4CC494FC7DF2C7E
Authority key identifier: D1:B4:AF:0A:27:5C:0D:07:42:C7:43:A8:BE:8B:CD:F5:6B:03:DA:7F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1B4AF0A275C0D0742C743A8BE8BCDF56B03DA7F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8i7mi8m8aS4fVAckgV46bbMJjPH5yAbWKaHkCexsXPzE/0/323830343a346331633a343030303a3a2f33342d3334203d3e20323637333530.roa
Signing time:             Sat 09 May 2026 02:47:09 +0000
ROA not before:           Sat 09 May 2026 02:42:09 +0000
ROA not after:            Sat 08 May 2027 02:47:09 +0000
asID:                     267350
IP address blocks:        2804:4c1c:4000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8i7mi8m8aS4fVAckgV46bbMJjPH5yAbWKaHkCexsXPzE/0/D1B4AF0A275C0D0742C743A8BE8BCDF56B03DA7F.crl
                          rsync://rpki-repo.registro.br/repo/8i7mi8m8aS4fVAckgV46bbMJjPH5yAbWKaHkCexsXPzE/0/D1B4AF0A275C0D0742C743A8BE8BCDF56B03DA7F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1B4AF0A275C0D0742C743A8BE8BCDF56B03DA7F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 12:54:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:2a:dc:2b:37:4f:87:3c:de:30:9a:e1:a4:cc:49:4f:c7:df:2c:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D1B4AF0A275C0D0742C743A8BE8BCDF56B03DA7F
        Validity
            Not Before: May  9 02:42:09 2026 GMT
            Not After : May  8 02:47:09 2027 GMT
        Subject: CN=9F5D499BC0B79F5F37AF966EB1274BCE42A5E05E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:b0:74:0c:5d:54:3e:ae:b9:3b:07:67:36:a8:
                    9d:93:44:b8:74:fa:d8:34:42:4b:c2:2b:04:82:ec:
                    6c:5a:a1:27:02:87:8a:28:75:a2:9c:80:c2:a1:1f:
                    77:2d:9e:02:11:91:22:e1:74:66:05:1d:37:fe:5a:
                    a4:c9:e8:21:60:5a:0e:f9:88:27:27:eb:d3:c8:cf:
                    06:e6:b0:97:72:e8:22:4d:b4:b4:17:fa:8f:15:4a:
                    da:86:00:70:ea:57:50:4f:f4:47:e6:fd:20:72:ed:
                    c3:5c:b2:1d:f5:73:a3:74:ab:c8:4d:50:88:e6:35:
                    67:38:29:71:9b:d4:8d:73:23:0c:51:92:56:38:a7:
                    3e:69:fd:0d:66:b8:53:c7:b8:b4:7b:36:b7:8c:02:
                    e7:0e:b2:c6:1d:5a:41:e0:69:04:96:95:80:e2:44:
                    d6:41:f4:7b:33:56:87:dd:2d:d1:84:e9:a0:f5:ac:
                    0f:0d:30:5c:c8:28:35:05:33:9b:d1:cc:4a:0e:4f:
                    7e:f7:2a:29:05:de:47:75:68:5c:33:4d:4e:ac:66:
                    44:1c:b0:7e:cd:ad:4f:f5:2e:6c:05:b0:b6:d9:66:
                    87:91:e8:74:e4:e2:d8:c4:f4:37:66:ef:5b:68:04:
                    16:56:f3:e3:d5:e5:c2:f5:53:f8:d7:1a:27:c7:18:
                    73:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:5D:49:9B:C0:B7:9F:5F:37:AF:96:6E:B1:27:4B:CE:42:A5:E0:5E
            X509v3 Authority Key Identifier:
                keyid:D1:B4:AF:0A:27:5C:0D:07:42:C7:43:A8:BE:8B:CD:F5:6B:03:DA:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8i7mi8m8aS4fVAckgV46bbMJjPH5yAbWKaHkCexsXPzE/0/D1B4AF0A275C0D0742C743A8BE8BCDF56B03DA7F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1B4AF0A275C0D0742C743A8BE8BCDF56B03DA7F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8i7mi8m8aS4fVAckgV46bbMJjPH5yAbWKaHkCexsXPzE/0/323830343a346331633a343030303a3a2f33342d3334203d3e20323637333530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4c1c:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         3e:3c:21:a3:f7:89:06:6d:e7:d5:92:a8:47:f0:69:74:35:c1:
         4b:20:a1:bc:ef:38:22:5d:15:bf:43:c4:d0:8b:27:7b:17:b9:
         b2:95:73:e6:ce:bf:aa:6c:6e:13:6f:a7:32:c0:e6:e8:58:45:
         4b:c7:25:b8:c7:68:97:21:ad:ae:e6:4a:c4:23:44:f4:74:2c:
         ee:d4:24:84:ed:8f:52:9a:63:40:1e:df:46:18:30:44:90:65:
         12:4a:6d:c2:f8:c1:92:c7:00:b1:10:4a:7b:05:e3:80:27:98:
         85:e7:9d:62:91:7c:48:e9:8a:3a:be:cc:8a:b4:92:24:71:17:
         b3:96:df:8a:66:4c:f6:f1:f7:21:be:e8:dc:2c:87:71:de:5a:
         92:e4:25:48:df:09:39:ad:ac:a3:e5:fa:c6:50:7b:86:a8:1b:
         00:f2:7e:55:4e:61:6a:99:f8:81:5d:cd:c6:e6:ca:6e:e4:c5:
         e8:1e:17:75:59:18:d2:72:91:cf:d8:0d:88:88:0b:17:7f:92:
         31:8f:1c:41:c5:76:10:50:2e:25:9c:16:7d:3f:ba:b0:66:77:
         c3:a9:73:92:c1:2a:05:91:00:3c:9d:e7:ce:7d:cf:ce:60:c9:
         04:ed:b4:10:b5:8a:3d:69:12:45:e7:b3:66:28:92:5a:81:fa:
         03:2c:94:89
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUAircKzdPhzzeMJrhpMxJT8ffLH4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDFCNEFGMEEyNzVDMEQwNzQyQzc0M0E4QkU4QkNERjU2
QjAzREE3RjAeFw0yNjA1MDkwMjQyMDlaFw0yNzA1MDgwMjQ3MDlaMDMxMTAvBgNV
BAMTKDlGNUQ0OTlCQzBCNzlGNUYzN0FGOTY2RUIxMjc0QkNFNDJBNUUwNUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcsHQMXVQ+rrk7B2c2qJ2TRLh0
+tg0QkvCKwSC7GxaoScCh4oodaKcgMKhH3ctngIRkSLhdGYFHTf+WqTJ6CFgWg75
iCcn69PIzwbmsJdy6CJNtLQX+o8VStqGAHDqV1BP9Efm/SBy7cNcsh31c6N0q8hN
UIjmNWc4KXGb1I1zIwxRklY4pz5p/Q1muFPHuLR7NreMAucOssYdWkHgaQSWlYDi
RNZB9HszVofdLdGE6aD1rA8NMFzIKDUFM5vRzEoOT373KikF3kd1aFwzTU6sZkQc
sH7NrU/1LmwFsLbZZoeR6HTk4tjE9Ddm71toBBZW8+PV5cL1U/jXGifHGHOtAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUn11Jm8C3n183r5ZusSdLzkKl4F4wHwYDVR0j
BBgwFoAU0bSvCidcDQdCx0OovovN9WsD2n8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOGk3bWk4bThhUzRmVkFja2dWNDZiYk1KalBINXlBYldLYUhrQ2V4c1hQ
ekUvMC9EMUI0QUYwQTI3NUMwRDA3NDJDNzQzQThCRThCQ0RGNTZCMDNEQTdGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0QxQjRBRjBBMjc1QzBEMDc0
MkM3NDNBOEJFOEJDREY1NkIwM0RBN0YuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhpN21pOG04YVM0ZlZBY2tnVjQ2YmJNSmpQSDV5QWJXS2FIa0NleHNYUHpFLzAv
MzIzODMwMzQzYTM0NjMzMTYzM2EzNDMwMzAzMDNhM2EyZjMzMzQyZDMzMzQyMDNk
M2UyMDMyMzYzNzMzMzUzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBigETBxAMA0GCSqGSIb3DQEBCwUA
A4IBAQA+PCGj94kGbefVkqhH8Gl0NcFLIKG87zgiXRW/Q8TQiyd7F7mylXPmzr+q
bG4Tb6cywOboWEVLxyW4x2iXIa2u5krEI0T0dCzu1CSE7Y9SmmNAHt9GGDBEkGUS
Sm3C+MGSxwCxEEp7BeOAJ5iF551ikXxI6Yo6vsyKtJIkcRezlt+KZkz28fchvujc
LIdx3lqS5CVI3wk5rayj5frGUHuGqBsA8n5VTmFqmfiBXc3G5spu5MXoHhd1WRjS
cpHP2A2IiAsXf5IxjxxBxXYQUC4lnBZ9P7qwZnfDqXOSwSoFkQA8nefOfc/OYMkE
7bQQtYo9aRJF57NmKJJagfoDLJSJ
-----END CERTIFICATE-----
Generated at Wed May 13 19:46:06 2026 by rpki-client